How to upgrade the MegaRAID Storage Manager to v.17.05 on DIVAR IP (DIP-61xx, DIP-71xx, DIP-72xx, DIP-73xx)?

The MegaRAID Storage Manager (MSM) is a Broadcom Inc. software used to configure, monitor, and maintain MegaRAID Serial-attached SCSI (SAS) RAID controllers with RAID control capabilities and the storage-related devices connected to them.

MegaRAID Storage Manager (MSM) versions before 17.05.06.00 are affected by Apache Log4j v1.x vulnerabilities and therefore this information aims to clarify the impact of the Apache Log4j v1.x vulnerabilities on a Bosch DIVAR IP system and provide guidelines to upgrade the MegaRAID Storage Manager (MSM) software, which is strongly advised to fix the vulnerabilities and reinforce the security of the system.

The MSM 17.05.06.00 version has been release to add enhancements, fix bugs and the log4j v.1.2 reported vulnerabilities as per in the release notes 17.05.06.00_MSM.txt.

To upgrade your DIVAR IP unit please carry out the following actions, specified, and advised by Broadcom:

Affected Products:

Bosch DIVAR IP 6000 R2 (DIP-61xx)
Bosch DIVAR IP 7000 R2 (DIP-71xx)
Bosch DIVAR IP all-in-one 7000 (DIP-72xx)
Bosch DIVAR IP all-in-one 7000 gen 3 (DIP-73xx)

We suggest that you also review this Security Notice.

Step-by-step guide

1. Before the MSM upgrade, download all required files to a USB stick:

Download the 32-bit/x86 JRE binary, recommended and tested JRE version: jdk8u372-b07. Notice MSM is a 32-bit application, so ensure the download of the 32-bit/x86 JRE binary.
Download the jdk8u372-b07 binary checksum file: OpenJDK8U-jre_x86-32_windows_hotspot_8u372b07.zip.sha256.txt
Download the MegaRAID Storage Manager v17.05.06.00 installation package.

2. Plug-in the USB stick on the DIVAR IP and copy the installation files. (Assume: C:\Users\Administrator\Downloads):

3. Set up the Java Runtime Environment (JRE).

Open the PowerShell and validate the integrity of the JRE binary (assume: C:\Users\Administrator\Downloads):

# Checksum value available in the file: OpenJDK8U-jre_x86-32_windows_hotspot_8u372b07.zip.sha256.txt

Get-FileHash -Algorithm SHA256 OpenJDK8U-jre_x86-32_windows_hotspot_8u372b07.zip

Unzip the OpenJRE file in your desired location (assume: C:\jre folder).

mkdir C:\jre
Expand-Archive OpenJDK8U-jre_x86-32_windows_hotspot_8u372b07.zip -D C:\jre
# On DIVAR IP 6000 R2 and 7000 R2 extract the archive manually to the directory ‘C:\jre’

Create the JRE_HOME as a system-wide variable.

setx /M JRE_HOME C:\jre\jdk8u372-b07-jre

To validate the variable creation, close the PowerShell and open a new window still as Administrator to ensure the variable is loaded and run the command:

# Expected result: C:\jre\jdk8u372-b07-jre

$Env:JRE_HOME

__

Upgrade the MegaRaid Storage Manager application

1. Unzip the zip file (assume: C:\Users\Administrator\Downloads):

Expand-Archive 17.05.06.00_MSM_Windows.zip
# On DIVAR IP 6000 R2 and 7000 R2 extract the archive manually to the directory
‘C:\Users\Administrator\Downloads\17.05.06.00_MSM_Windows’

2. Ensure the files have not been corrupted during download:

cd 17.05.06.00_MSM_Windows
# MSM17050600.zip checksum is available in the MD5CheckSum.txt file
Get-FileHash -Algorithm MD5 MSM17050600.zip

3. Unzip the MSM17050600.zip file:

Expand-Archive MSM17050600.zip
# On DIVAR IP 6000 R2 and 7000 R2 extract the archive manually to the directory
‘C:\Users\Administrator\Downloads\17.05.06.00_MSM_Windows\MSM17050600’.

4. Run the setup.exe installation file to upgrade the MSM:

cd .\MSM17050600\DISK1\
.\setup.exe /s /v"/qn UPGRADEONLY=1 SETUPTYPE=Complete"
! If after the upgrade the MegaRAID Storage Manager stop working, go to
“C:\Users\Administrator\Downloads\17.05.06.00_MSM_Windows\MSM17050600\DISK1”, run the
MegaRAID Storage Manager (MSM) setup.exe and on the InstallShield Wizard select Repair to repair
installation errors in the program.

5. The upgrade will run in the background silently up to a minute. Open the MegaRaid Storage Manager application afterwards and the new version should be available.

Note: A README file is available in the 17.05.06.00 MSM with detailed information about the upgrade. It can be used to support the installation process or troubleshooting.

Notice

For consistent functionality, compatibility, performance, and security, regularly update the software to the latest version throughout the operational life of the device.